dir-100 vulnerabilities and fixes

Recent CVEs affecting dir-100, with upgrade or downgrade steps. 3 tracked.

Also searched as: dir 100.

dir-100 has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2013-10-19. Highest priority: CVE-2013-6026 (score 64/100).

• CVE-2013-6027 HIGH 8.5 MITIGATE Stack-based buffer overflow in the RuntimeDiagnosticPing function in /bin/webs on D-Link DIR-100 routers might
• CVE-2013-6026 HIGH 10.0 MITIGATE MITIGATE The web interface on D-Link DIR-100, DIR-120, DI-624S, DI-524UP, DI-604S, DI-604UP, DI-604+, and TM-G5240 rout
• CVE-2008-4133 MEDIUM 4.3 MITIGATE The web proxy service on the D-Link DIR-100 with firmware 1.12 and earlier does not properly filter web reques

FAQ

How do I fix dir-100 vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is dir-100 being exploited right now?

None of the tracked dir-100 CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which dir-100 CVE should I patch first?

CVE-2013-6026 currently ranks highest (64/100): The web interface on D-Link DIR-100, DIR-120, DI-624S, DI-524UP, DI-604S, DI-604UP, DI-604+, and TM-G5240 rout.

RSS feed for dir-100 · ← Back to latest CVEs